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DETAILED ACTION 



This first non-final action is in response to the Request for Continued Examination filing 
of 02/27/2008. Claims 1 & 3-20 are pending and have been considered as follows. 

Specification 

1 . The specification is objected to as failing to provide proper antecedent basis for the 
claimed subject matter. See 37 CFR 1.75(d)(1) and MPEP § 608.01(o). Correction of the 
following is required: 

The applicant's Specification lacks proper antecedent basis for Claim 16 which recites "a 
computer usable medium." 

Claim Objections 

2. Claims 1, 9, & 16 are objected to because of the following informalities: 
Claim 1 line 5 recites the term "when" which should be ". . .after. . ."; 

- Claim 9 line 1 recites "a system for resetting" which should be ". . .a system configured 
to reset..."; 

- Claim 9 line 3 recites "when" which should be ". . . after. . . "; 

Claim 16 line 1 recites the term "for" which should be ". . .configured to. . ."; 
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Claim 16 line 3 recites "usable" which should be ". . .readable storage. . ."; 
- Claim 16 line 5 recites the term "when" which should be ". . .after. . ."; 
Appropriate correction is required. 



Claim Rejections - 35 USC §101 

3. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 

Claim 9 is rejected under 35 U.S.C. 1 0 1 because the claimed invention is directed to non- 
statutory subject matter. 

Claim 9 recites a system that performs function steps but without any mention of 
hardware or some structure that performs these function steps. 

See, e.g., Rubber-Tip Pencil Co. v. Howard, 87 U.S. (20 Wall.) 498, 507 (1874) ("idea of 
itself is not patentable, but a new device by which it may be made practically useful is "); 
Mackay Radio & Telegraph Co. v. Radio Corp. of America, 306 U.S. 86, 94, 40 USPQ 
199, 202 (1939) ("While a scientific truth, or the mathematical expression of it, is not 
patentable invention, a novel and useful structure created with the aid of knowledge of 
scientific truth may be. "); Warmerdam, 33 F.3d at 1360, 31 USPQ2d at 1 759 ("steps of 
locating' a medial axis, and creating' a bubble hierarchy . . . describe nothing more than 
the manipulation of basic mathematical constructs, the paradigmatic abstract idea "') 
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Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

5. Claims 1 & 30-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over Raith 
(US-5241598-A) in view of Hatta (US-5 1 15508-A) and in further view of BanesetaL (US- 
20030182584-A1). 

Claim 1: 

Raith discloses a method of resetting a key for accessing a computer program comprising, 
- "setting a flag to indicate that the key is to be reset" (i.e. "including in a message sent 
from the network to the mobile station an order or a signal (flag) to reset the B-key") 
[column 30 lines 52-53]; 

"starting a process associated with the program" (i.e. "Execution of the authentication 
algorithm in the home network") [column 17 lines 37-38]; 

"determining, when the process has been started, whether the flag is set" (i.e. "The 
network may reset the B-key value in the network to the selected value immediately 
before or at the time of activating the B-key step flag, i.e., setting the bit-value equal to 1 
for example, in an order message sent to the mobile station or immediately after receiving 
from the mobile station an acknowledgement of the order message") [column 30 lines 65- 
68 & column 31 lines 1-3]; 
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"resetting the key to a default value based on the flag" (i.e. 'According to the present 
invention, resynchronization of the B-key used by the network and the mobile station 
may be accomplished by resetting the B-key input to AUTH in each of the network and 
the mobile station to a selected value") [column 30 lines 38-42]; 
but, Raith does not disclose, 

- "wherein the flag comprises a value stored at a computer on which the computer 
program is installed," although Hatta does suggest storing a flag, as recited below; 

- "determining whether the flag is set comprises reading the stored value," although Hatta 
does suggest judging a flag to make a decision, as recited below; 

- "a prescribed level of privilege with respect to the computer is required to set the flag 
and start the process such that a user having the prescribed level of privilege but not the 
key can without intervention of a provider with which the computer program is 
associated cause the key to be reset to the default value," although Banes et al. do 
suggest password resetting without the aid of a third party, as recited below; 

however, Hatta does disclose, 

"store writing prohibition flag WRP" [column 3 line 4]; 

- "the condition of the password setting flag PASF1 is judged" [column 3 lines 35-36]; 
whereas, Banes et al. do disclose, 

"implementations creating a password reset disk and using the password reset disk to 
reset a user password in a computer system are shown. Utilizing the described systems 
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and methods a user can create a password reset disk that—in the event that the user 
forgets her password -can be used to securely create a new password for the user 
without the user having to contact a third party" [page 1 para 9 lines 1-7]; 
Therefore, it would have been obvious for one of ordinary skill in the art at the time of the 
applicant's invention to include, "wherein the flag comprises a value stored at a computer on 
which the computer program is installed" and "determining whether the flag is set comprises 
reading the stored value" and "a prescribed level of privilege with respect to the computer is 
required to set the flag and start the process such that a user having the prescribed level of 
privilege but not the key can without intervention of a provider with which the computer 
program is associated cause the key to be reset to the default value," in the invention as disclosed 
by Raith for the purposes of storing a flag value and permitting a user to reset their password 
without intervention of a third party. 
Claim 3: 

Raith , Hatta, and Banes et al. disclose a method of resetting a key for accessing a computer 

program, as in Claim 1 above, further comprising, 

- "logging in with, sufficient privileges to start the process" (i.e. "To guard against this 
risk, the performance of a B-key reset may be linked to the performance of bilateral 
authentication, i.e., to the validation of the network") [column 32 lines 4-7]. 
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Claim 4: 

Raith, Hatta, and Banes et al. disclose a method of resetting a key for accessing a computer 

program, as in Claim 1 above, further comprising, 

- "the flag is an environment variable" (i.e. "The B-key reset flag may consist of any 
number of bits and, in the simplest case, may be no more than a single bit (1 or 0) 
assigned to a specific field in the message transmitted from the network to the mobile 
station") [column 30 lines 61-64]. 

Claim 5: 

Raith , Hatta, and Banes et al. disclose a method of resetting a key for accessing a computer 

program, as in Claim 4 above, further comprising, 

"resetting the key to a default value includes instructing a database system to reset the 
key" (i.e. "According to the present invention, resynchronization of the B-key used by the 
network and the mobile station may be accomplished by resetting the B-key input to 
AUTH in each of the network and the mobile station to a selected value" [column 30 
lines 38-42]. 

Claim 6: 

Raith , Hatta, and Banes et al. disclose a method of resetting a key for accessing a computer 

program, as in Claim 4 above, further comprising, 

"unsetting the flag" (i.e. "The B-key reset flag may consist of any number of bits and, in 
the simplest case, may be no more than a single bit (1 or 0) assigned to a specific field in 
the message transmitted from the network to the mobile station") [column 30 lines 61- 
64]. 
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Claim 7: 

Raith, Hatta, and Banes et al. disclose a method of resetting a key for accessing a computer 

program, as in Claim 6 above, further comprising, 

- "starting the process again" (i.e. "When the mobile subscriber crosses over into another 
area, the exchange associated with that area, upon receiving an identity signal from the 
telephone unit, will record an indication of the mobile subscriber's presence there and 
then transmit the identity signal to all of the other exchanges together with its own 
identity signal, for the purpose of updating the mobile subscriber's position") [column 2 
lines 59-66]. 

Claim 8: 

Raith , Hatta, and Bancs ct al. disclose a method of resetting a key for accessing a computer 

program, as in Claim 6 above, further comprising, 

"changing the key from the default value to a secure value" (i.e. "Where encryption is 
desired, a new S-key must be calculated since the previous S-key was calculated using 
the previous B-key which was out of synchronization") [column 31 lines 10-13]. 

Claims 9: 

Raith discloses a system for resetting a key for accessing a computer program, comprising a 
computer comprising, 

"determine whether a flag is set, when a process associated with the computer program is 
started" (i.e. "The network may reset the B-key value in the network to the selected value 
immediately before or at the time of activating the B-key step flag, i.e., setting the bit- 
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value equal to 1 for example, in an order message sent to the mobile station or 
immediately after receiving from the mobile station an acknowledgement of the order 
message") [column 30 lines 65-68 & column 31 lines 1-3]; 

- "reset the key to a default value, based on the flag" (i.e. "According to the present 
invention, resynchronization of the B-key used by the network and the mobile station 
may be accomplished by resetting the B-key input to AUTH in each of the network and 
the mobile station to a selected value") [column 30 lines 38-42]; 

but, Raith does not disclose, 

"wherein the flag comprises a value stored on the computer," although Hatta does 
suggest storing a flag, as recited below; 

"the computer is configured to determine whether the flag is set by reading the stored 
value," although Hatta does suggest judging a flag to make a decision, as recited below; 
"a prescribed level of privilege with respect to the computer is required to set the flag 
and start the process such that a user having the prescribed level of privilege but not the 
key can without intervention of a provider with which the computer program is 
associated cause the key to be reset to the default value," although Banes et al. do 
suggest password resetting without the aid of a third party, as recited below; 
however, Hatta does disclose, 

"store writing prohibition flag WRP" [column 3 line 4]; 

- "the condition of the password setting flag PASF1 is judged" [column 3 lines 35-36]; 
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whereas, Banes et al. do disclose, 

- "implementations creating a password reset disk and using the password reset disk to 
reset a user password in a computer system are shown. Utilizing the described systems 
and methods a user can create a password reset disk that~in the event that the user 
forgets her password —can be used to securely create a new password for the user 
without the user having to contact a third party" [page 1 para 9 lines 1-7]; 
Therefore, it would have been obvious for one of ordinary skill in the art at the time of the 
applicant's invention to include, "wherein the flag comprises a value stored on the computer" 
and "the computer is configured to determine whether the flag is set by reading the stored value" 
and "a prescribed level of privilege with respect to the computer is required to set the flag and 
start the process such that a user having the prescribed level of privilege but not the key can 
without intervention of a provider with which the computer program is associated cause the key 
to be reset to the default value," in the invention as disclosed by Raith for the purposes of storing 
a flag value and permitting a user to reset their password without intervention of a third party. 
Claim 10: 

Raith , Hatta, and Banes et al. disclose a system for resetting a key for accessing a computer 
program, comprising a computer, as in Claim 9 above, further comprising, 

"configured to require administrator privileges to start the process" (i.e. "To guard 
against this risk, the performance of a B-key reset may be linked to the performance of 
bilateral authentication, i.e., to the validation of the network") [column 32 lines 4-7]. 
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Claim 11: 

Raith, Hatta, and Banes et al. disclose a system for resetting a key for accessing a computer 
program, comprising a computer, as in Claim 10 above, further comprising, 

- "the flag is an environment variable" (i.e. "The B-key reset flag may consist of any 
number of bits and, in the simplest case, may be no more than a single bit (1 or 0) 
assigned to a specific field in the message transmitted from the network to the mobile 
station") [column 30 lines 61-64]. 
Claim 12: 

Raith , Hatta, and Banes et al. disclose a system for resetting a key for accessing a computer 
program, comprising a computer, as in Claim 1 1 above, further comprising, 

"a database system configured to store the key" (i.e. "the HLR has no voice transmission, 
reception or switching facilities, but is essentially a database from and to which 
information can be read and written") [column 15 lines 7-9]; 

"the system is configured to reset the key by instructing the database system to reset the 
key" (i.e. "the network can retrieve information pertaining to that particular mobile 
station, e.g., security keys, from the location or database") [column 15 line 68 & column 
16 lines 1-2]. 
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Claim 13: 

Raith, Hatta, and Banes et al. disclose a system for resetting a key for accessing a computer 
program, comprising a computer, as in Claim 9 above, further comprising, 

- "the key is associated with an administrator account for accessing the computer program" 
(i.e. "To guard against this risk, the performance of a B-key reset may be linked to the 
performance of bilateral authentication, i.e., to the validation of the network") [column 32 
lines 4-7]. 
Claim 14: 

Raith , Hatta, and Banes et al. disclose a system for resetting a key for accessing a computer 
program, comprising a computer, as in Claim 9 above, further comprising, 

"the computer program executes on the computer" (i.e. "an authentication algorithm 
executed in each of the mobile station and the network") [column 7 lines 62-64]. 
Claim 15: 

Raith , Hatta, and Banes et al. disclose a system for resetting a key for accessing a computer 
program, comprising a computer, as in Claim 9 above, further comprising, 

"the computer program executes on a second computer" (i.e. "an authentication algorithm 
executed in each of the mobile station and the network") [column 7 lines 62-64]. 
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Claim 16: 

Raith discloses a computer program product for resetting a key for accessing a computer 
program, comprising a computer usable medium having machine readable code embodied 
therein comprising, 

"determining whether a flag is set, when a process associated with the computer program 
is started" (i.e. "The network may reset the B-key value in the network to the selected 
value immediately before or at the time of activating the B-key step flag, i.e., setting the 
bit- 
value equal to 1 for example, in an order message sent to the mobile station or 
immediately after receiving from the mobile station an acknowledgement of the order 
message") [column 30 lines 65-68 & column 31 lines 1-3]; 
- "resetting the key to a default value, based on the flag" (i.e. "According to the present 
invention, resynchronization of the B-key used by the network and the mobile station 
may be accomplished by resetting the B-kcy input to AUTH in each of the network and 
the mobile station to a selected value") [column 30 lines 38-42]; 
but, Raith does not disclose, 

"wherein the flag comprises a value stored at a computer on which the computer 

program is installed," although Hatta does suggest storing a flag, as recited below; 

"determining whether the flag; is set comprises reading the stored value," although Hatta 

does suggest judging a flag to make a decision, as recited below; 
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"a prescribed level of privilege with respect to the computer is required to set the flag 
and start the process such that a user having the prescribed level of privilege but not the 
key can without intervention of a provider with which the computer program is 
associated cause the key to be reset to the default value," although Banes et al. do 
suggest password resetting without the aid of a third party, as recited below; 
however, Hatta does disclose, 

"store writing prohibition flag WRP" [column 3 line 4]; 

- "the condition of the password setting flag PASF1 is judged" [column 3 lines 35-36]; 
whereas, Banes et al. do disclose, 

- "implementations creating a password reset disk and using the password reset disk to 
reset a user password in a computer system are shown. Utilizing the described systems 
and methods a user can create a password reset disk that~in the event that the user 
forgets her password —can be used to securely create a new password for the user 
without the user having to contact a third party" [page 1 para 9 lines 1-7]; 

Therefore, it would have been obvious for one of ordinary skill in the art at the time of the 
applicant's invention to include, "wherein the flag comprises a value stored at a computer on 
which the computer program is installed" and "determining whether the flag; is set comprises 
reading the stored value" and "a prescribed level of privilege with respect to the computer is 
required to set the flag and start the process such that a user having the prescribed level of 
privilege but not the key can without intervention of a provider with which the computer 
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program is associated cause the key to be reset to the default value," in the invention as disclosed 
by Raith for the purposes of storing a flag value and permitting a user to reset their password 
without intervention of a third party. 
Claim 17: 

Raith , Hatta, and Banes et al. disclose a computer program product for resetting a key for 
accessing a computer program, comprising a computer usable medium having machine readable 
code embodied therein, as in Claim 16 above, further comprising, 

- "a database system configured to store the key" (i.e. "the HLR has no voice transmission, 

reception or switching facilities, but is essentially a database from and to which 

information can be read and written") [column 15 lines 7-9]; 

"resetting the key includes instructing the database system to reset the key" (i.e. "the 
network can retrieve information pertaining to that particular mobile station, e.g., security 
keys, from the location or database") [column 15 line 68 & column 16 lines 1-2]. 
Claim 18: 

Raith, Hatta, and Banes et al. disclose a computer program product for resetting a key for 
accessing a computer program, comprising a computer usable medium having machine readable 
code embodied therein, as in Claim 16 above, further comprising, 

"the key is associated with an administrator account for accessing the computer program" 
(i.e. "To guard against this risk, the performance of a B-key reset may be linked to the 
performance of bilateral authentication, i.e., to the validation of the network") [column 32 
lines 4-7]. 
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Claim 19: 

Raith, Hatta, and Banes et al. disclose a computer program product for resetting a key for 

accessing a computer program, comprising a computer usable medium having machine readable 

code embodied therein, as in Claim 16 above, further comprising, 

"code for requiring sufficient privileges to start the process" (i.e. "To guard against this 
risk, the performance of a B-key reset may be linked to the performance of bilateral 
authentication, i.e., to the validation of the network") [column 32 lines 4-7]. 

Claim 20: 

Raith , Hatta, and Banes et al. disclose a computer program product for resetting a key for 
accessing a computer program, comprising a computer usable medium having machine readable 
code embodied therein, as in Claim 16 above, further comprising, 

- "code for changing the key from the default value to a secure value" (i.e. "Where 
encryption is desired, a new S-key must be calculated since the previous S-key was 
calculated using the previous B-key which was out of synchronization") [column 3 1 lines 
10-13]. 
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Response to Arguments 

6. Applicant's arguments filed 02/27/2008 in regards to Raith (US-524 1 598-A) have been 
fully considered but they are not persuasive. 

- The applicant's argument which states "..the signal taught by Raith is not a "flag" within 
the meaning of the claim because it is not a stored value that is subsequently read to 
determine whether it has been set to a value indicating that the key should be reset to the 
default value. . ." has been considered but is non-persuasive. The examiner notes that the 
"flag" in Raith still functions in a similar manor; that is it is still a flag with a value 
determining a condition. 

7. Applicant's remaining arguments with respect to claims 1 & 3-20 have been considered 
but are moot in view of the new ground(s) of rejection as necessitated by the applicant's 
amendments. 

Conclusion 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Examiner Oscar Louie whose telephone number is 571-270-1684. 
The examiner can normally be reached Monday through Thursday from 7:30 AM to 4:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami, can be reached at 571-272-4195. The fax phone number for 
Formal or Official faxes to Technology Center 2100 is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

OAL 

06/02/2008 



/Nasser G Moazzami/ 

Supervisory Patent Examiner, Art Unit 2136 



